{"id":381254,"date":"2026-10-17T05:08:00","date_gmt":"2026-10-17T12:08:00","guid":{"rendered":"https:\/\/cms-articles.softonic.io\/en\/?p=381254"},"modified":"2026-10-17T05:08:12","modified_gmt":"2026-10-17T12:08:12","slug":"meta-discloses-github-breach-code-and-data-of-1500-people-exposed","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/meta-discloses-github-breach-code-and-data-of-1500-people-exposed\/","title":{"rendered":"Meta discloses GitHub breach: code and data of 1,500 people exposed"},"content":{"rendered":"

On October 13, 2026, Meta disclosed a GitHub<\/a> breach tied to stolen employee credentials. Meta says the breach led to the theft of software code and personal data connected to about 1,500 people<\/strong>.<\/p>\n

\r\n
\r\n
\r\n
\r\n \"Dashlane\"\r\n <\/div>\r\n
\r\n Dashlane<\/span>\r\n Download<\/a>\r\n <\/div>\r\n
\r\n <\/path><\/path><\/text><\/svg>\r\n <\/div>\r\n <\/div>\r\n
\r\n <\/span>\r\n <\/div>\r\n
\r\n \r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n\n\n\n

The company wants people to read this as an account-security incident, not a flaw in a Meta product or a breach of Meta’s internal systems. In Meta’s telling, attackers got into certain GitHub repositories by using compromised logins. About 99%<\/strong> of what was taken was business data, including source code. The remaining 1% was personal data, mostly involving US-based employees, and those people are being notified.<\/p>\n\n

Meta also said personal data wasn’t supposed to be sitting in those repositories at all. It says the files were uploaded by mistake, against company policy<\/strong>. The company added that some of what looked like personal data was actually synthetic or anonymized test data, which could make part of the stolen material less useful, even though that doesn’t remove the risk for people whose real information was exposed.<\/p>\n\n

If you follow security news, this update stands out for a separate reason. Meta says it found the intrusion weeks before<\/strong> the October 13, 2026 report, cut off access, brought in GitHub and law enforcement, rotated secrets, and added more controls and scanning. Even so, it still hasn’t said who stole the credentials, or whether the access came through phishing, infostealer malware, password reuse, or some other method.<\/p>\n\n

You can get the latest details from Meta’s disclosure and GitHub’s incident updates.<\/p>\n

\r\n
\r\n
\r\n
\r\n \"NordPass\"\r\n <\/div>\r\n
\r\n NordPass<\/span>\r\n Download<\/a>\r\n <\/div>\r\n
\r\n <\/path><\/path><\/text><\/svg>\r\n <\/div>\r\n <\/div>\r\n
\r\n <\/span>\r\n <\/div>\r\n
\r\n \r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"

On October 13, 2026, Meta disclosed a GitHub breach tied to stolen employee credentials. Meta says the breach led to the theft of software code and personal data connected to about 1,500 people. The company wants people to read this as an account-security incident, not a flaw in a Meta product or a breach of … Continue reading “Meta discloses GitHub breach: code and data of 1,500 people exposed”<\/span><\/a><\/p>\n","protected":false},"author":1009,"featured_media":381253,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[1015],"tags":[],"usertag":[],"vertical":[],"content-category":[],"class_list":["post-381254","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/381254","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/1009"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=381254"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/381254\/revisions"}],"predecessor-version":[{"id":381255,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/381254\/revisions\/381255"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/381253"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=381254"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=381254"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=381254"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=381254"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=381254"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=381254"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}